$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.mft File: 45Npup3YgJmHsja0d6144Vx1qxw.mft (raw, json) Hash identifier: 5Dbd5040F6OH9HVWxVEkdihEoEa/M5dMXcNimWvHTPg= Subject key identifier: DB:CD:DE:CF:D6:1A:86:1A:27:F7:D7:BA:C1:F3:30:A2:15:1A:64:0D Authority key identifier: E3:93:69:BA:9D:D8:80:99:87:B2:36:B4:77:AD:78:E1:5C:75:AB:1C Certificate issuer: /CN=A91C0C73/serialNumber=E39369BA9DD8809987B236B477AD78E15C75AB1C Certificate serial: 022E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45Npup3YgJmHsja0d6144Vx1qxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.mft Manifest number: 0225 Signing time: Sun 15 Jun 2025 01:39:45 +0000 Manifest this update: Sun 15 Jun 2025 01:39:44 +0000 Manifest next update: Sun 22 Jun 2025 01:39:44 +0000 Files and hashes: 1: 45Npup3YgJmHsja0d6144Vx1qxw.crl (hash: vNlUZ7eZPXbgabmbcAHQox/GSyC729C3zpkIv6FaTTM=) 2: 3728DA229A8611EFA824F73BC4F9AE02.roa (hash: s/TAy9epcEKTC12lHA/WIlwW4b4QaIyA/jvIAJ5W4eQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.crl rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45Npup3YgJmHsja0d6144Vx1qxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:39:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 558 (0x22e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0C73, serialNumber=E39369BA9DD8809987B236B477AD78E15C75AB1C Validity Not Before: Jun 15 01:39:44 2025 GMT Not After : Jun 22 01:39:44 2025 GMT Subject: CN=684e2461-e365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e0:db:8d:52:03:e3:4e:a7:8b:af:74:e1:7c: 9f:84:d9:ea:c9:c4:1a:ea:42:59:cb:52:7f:97:3a: 92:33:04:be:16:e3:0b:f4:bb:97:da:90:d5:a2:a2: 9c:b7:0a:52:44:d3:44:99:da:af:e7:d9:79:b1:2b: 94:83:fe:e7:01:ab:6f:28:42:f1:d0:4b:f8:ca:8c: 71:b8:a1:98:bd:f4:c9:7b:cb:85:74:8a:78:20:0d: 1c:aa:87:06:be:7f:b2:45:aa:4d:ad:c0:88:42:f8: 9f:f9:1c:87:6a:c0:78:bf:92:03:7a:c7:37:96:bc: 81:9e:62:25:e9:dc:23:eb:3a:2e:0c:fd:b2:76:0f: f4:f4:f1:cc:f4:76:33:91:9e:48:d4:d7:4f:f4:50: 6c:b2:ac:a6:9e:5f:39:ab:6c:e8:72:f8:ab:42:ba: a1:92:a8:8a:a0:fe:a2:79:e0:46:9d:ee:4e:70:ad: 7b:99:83:97:80:47:ae:f7:2d:ad:62:19:65:0b:3e: e4:ff:66:26:8e:bc:e4:ed:02:e3:e2:52:00:4f:66: 19:14:73:a6:75:d5:dd:79:75:3d:6e:ef:72:1e:cc: 87:c9:31:c3:59:24:be:52:06:61:57:c2:77:96:3b: fe:9d:df:5f:5e:eb:43:88:95:41:9b:be:d9:3b:51: 28:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:CD:DE:CF:D6:1A:86:1A:27:F7:D7:BA:C1:F3:30:A2:15:1A:64:0D X509v3 Authority Key Identifier: keyid:E3:93:69:BA:9D:D8:80:99:87:B2:36:B4:77:AD:78:E1:5C:75:AB:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45Npup3YgJmHsja0d6144Vx1qxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:b5:61:89:cf:4d:98:b6:49:a9:59:b3:41:43:69:34:30:d2: 01:64:b7:39:40:0f:ff:ae:a0:77:d9:ae:3e:b3:2e:1b:b5:32: 27:58:59:0a:b8:ea:37:05:7f:17:e7:fb:e0:45:c6:5f:1d:14: a0:bd:30:58:ef:ee:ac:59:cf:7d:03:b8:fc:38:f6:a3:4a:9e: a6:e2:92:c2:55:18:f9:a6:54:79:63:94:9a:97:aa:0f:70:c3: 48:ee:66:8c:2d:c7:ab:ad:11:21:cf:6a:93:06:72:60:ce:98: 24:e2:7c:2c:36:5d:aa:b0:9a:2e:9e:4a:16:49:db:07:09:d7: b3:0b:41:ac:3e:df:7b:0e:f4:ab:6c:0a:a9:0e:5e:47:63:87: 36:8f:6e:41:4c:5e:73:3d:84:07:0d:87:9e:06:f6:b1:3f:85: fa:f1:a7:f1:41:cd:f0:ed:c2:0d:28:6d:db:12:b7:9b:71:e1: 84:79:8c:29:6d:f7:16:a3:6b:75:b4:66:28:52:55:50:2c:82: aa:97:70:71:e9:5e:12:a2:05:34:6c:96:ae:2b:f5:f5:61:e0: 77:48:7c:d7:c0:56:68:12:aa:c3:a6:21:52:ae:63:6f:00:57: 97:92:8f:a1:b0:5b:fb:d3:85:b3:ef:27:14:88:76:cb:92:4d: 67:fc:f5:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBDNzMxMTAvBgNVBAUTKEUzOTM2OUJBOUREODgwOTk4N0IyMzZCNDc3QUQ3OEUx NUM3NUFCMUMwHhcNMjUwNjE1MDEzOTQ0WhcNMjUwNjIyMDEzOTQ0WjAYMRYwFAYD VQQDEw02ODRlMjQ2MS1lMzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0eDbjVID406ni6904XyfhNnqycQa6kJZy1J/lzqSMwS+FuML9LuX2pDVoqKc twpSRNNEmdqv59l5sSuUg/7nAatvKELx0Ev4yoxxuKGYvfTJe8uFdIp4IA0cqocG vn+yRapNrcCIQvif+RyHasB4v5IDesc3lryBnmIl6dwj6zouDP2ydg/09PHM9HYz kZ5I1NdP9FBssqymnl85q2zocvirQrqhkqiKoP6ieeBGne5OcK17mYOXgEeu9y2t YhllCz7k/2Ymjrzk7QLj4lIAT2YZFHOmddXdeXU9bu9yHsyHyTHDWSS+UgZhV8J3 ljv+nd9fXutDiJVBm77ZO1EoTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNvN3s/W GoYaJ/fXusHzMKIVGmQNMB8GA1UdIwQYMBaAFOOTabqd2ICZh7I2tHeteOFcdasc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEM3My8yMTVFNUQzQTM2 NUExMUVEQUQxMEJBN0FDNEY5QUUwMi80NU5wdXAzWWdKbUhzamEwZDYxNDRWeDFx eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ1TnB1cDNZZ0ptSHNqYTBkNjE0NFZ4MXF4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEM3My8yMTVFNUQzQTM2NUExMUVEQUQxMEJBN0FDNEY5QUUwMi80NU5wdXAzWWdK bUhzamEwZDYxNDRWeDFxeHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqtWGJz02YtkmpWbNBQ2k0MNIBZLc5QA//rqB32a4+sy4btTInWFkK uOo3BX8X5/vgRcZfHRSgvTBY7+6sWc99A7j8OPajSp6m4pLCVRj5plR5Y5Sal6oP cMNI7maMLcerrREhz2qTBnJgzpgk4nwsNl2qsJounkoWSdsHCdezC0GsPt97DvSr bAqpDl5HY4c2j25BTF5zPYQHDYeeBvaxP4X68afxQc3w7cINKG3bErebceGEeYwp bfcWo2t1tGYoUlVQLIKql3Bx6V4SogU0bJauK/X1YeB3SHzXwFZoEqrDpiFSrmNv AFeXko+hsFv704Wz7ycUiHbLkk1n/PWq -----END CERTIFICATE-----Generated at Sun Jun 15 08:46:49 2025 by rpki-client